Visual Studio Code Tampering Vulnerability

Summary

Details

Vulnerabilities 1

• Medium 6.5
  CVE-2026-81377

  Visual Studio Code Tampering Vulnerability

  Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

  Microsoft Visual Studio Code
  Sep 8, 2026

Revision history

1. 2026-09-08 #1

   Information published.

References

• CVE-2026-81377 Visual Studio Code Tampering Vulnerability - HTML
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81377
• Microsoft Exploitability Index
  https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
• Microsoft Support Lifecycle
  https://support.microsoft.com/lifecycle
• Common Vulnerability Scoring System
  https://www.first.org/cvss